Lucene search
+L

185 matches found

OSV
OSV
added 2026/02/20 12:16 a.m.3 views

CVE-2026-2408

Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension...

4.7CVSS5.8AI score0.00122EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/19 11:9 p.m.28 views

CVE-2026-2408 Use-after-free in Cloud Workloads

Tanium addressed a use-after-free vulnerability in the Cloud Workloads Enforce client extension...

4.7CVSS0.00122EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2020-2408

Malware in sbrugna...

7.8CVSS7.7AI score0.00894EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/12 12:0 a.m.6 views

Microsoft Azure Stack 路径遍历漏洞

Microsoft Azure Stack is a hybrid cloud computing software solution based on the Azure cloud platform from Microsoft USA. The product supports building and deploying hybrid applications. A path traversal vulnerability exists in Microsoft Azure Stack. An attacker exploiting this vulnerability coul...

7.5CVSS6.3AI score0.01311EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:0 a.m.8 views

TencentOS Server 4: openssl (TSSA-2024:0914)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0914 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

7.5CVSS7AI score0.01158EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2025/05/23 1:52 a.m.11 views

CVE-2023-2408

A vulnerability, which was classified as critical, has been found in SourceCodester AC Repair and Services System 1.0. Affected by this issue is some unknown functionality of the file services/view.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotel...

6.5CVSS7.4AI score0.0063EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:18 a.m.9 views

CVE-2011-2408

Cross-site scripting XSS vulnerability in the Contacts application in HP Palm webOS 3.x before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS5.9AI score0.01463EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:39 p.m.8 views

CVE-2002-2408

Gordano Messaging Server GMS Mail 8 a.k.a. NTMail only filters email messages for the first recipient, which allows remote attackers to bypass JUCE filters by sending a message to more than one user on the GMS server...

7.5CVSS7.1AI score0.01427EPSS
SaveExploits0References1
Circl
Circl
added 2025/04/10 1:43 p.m.16 views

CVE-2025-2408

creationtimestamp| type| source ---|---|--- 2025-04-10 13:43:26+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114313960192880711 2025-04-10 13:44:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114313962647315508 2025-04-10 15:32:56+00:00| seen|...

5.3CVSS4.8AI score0.00323EPSS
SaveExploits1References5
NVD
NVD
added 2025/04/10 1:15 p.m.16 views

CVE-2025-2408

An issue has been discovered in GitLab CE/EE affecting all versions from 13.12 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. Under certain conditions users could bypass IP access restrictions and view sensitive information...

5.3CVSS0.00323EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/04/10 12:30 p.m.9 views

CVE-2025-2408 Insufficient Granularity of Access Control in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 13.12 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. Under certain conditions users could bypass IP access restrictions and view sensitive information...

5.3CVSS5.1AI score0.00323EPSS
SaveExploits1References2
CVE
CVE
added 2025/04/10 12:30 p.m.221 views

CVE-2025-2408

GitLab CE/EE is affected by CVE-2025-2408 in versions 13.12 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. Under certain conditions, users could bypass IP access restrictions and view sensitive information (information disclosure). Remediation: upgrade to GitLab 17.8.7, 17.9.6, or 1...

5.3CVSS5.1AI score0.00323EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
added 2025/04/10 12:30 p.m.9 views

CVE-2025-2408

Removed by vendor...

5.3CVSS5.8AI score0.00323EPSS
SaveExploits1
OSV
OSV
added 2025/04/10 12:30 p.m.10 views

CVE-2025-2408 Insufficient Granularity of Access Control in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 13.12 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. Under certain conditions users could bypass IP access restrictions and view sensitive information...

5.3CVSS6.4AI score0.00323EPSS
SaveExploits1References5
Tenable Nessus
Tenable Nessus
added 2025/04/10 12:0 a.m.19 views

GitLab 13.12 < 17.8.7 / 17.9 < 17.9.6 / 17.10 < 17.10.4 (CVE-2025-2408)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions from 13.12 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. Under certain conditions users could bypass IP access...

5.3CVSS5.5AI score0.00323EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2025/03/18 4:15 p.m.3 views

CVE-2025-27688

Dell ThinOS 2408 and prior, contains an improper permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.8CVSS5.8AI score0.00131EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/18 12:0 a.m.5 views

Dell ThinOS 安全漏洞

Dell ThinOS is a client operating system from the American company Dell. An authorization issue vulnerability exists in Dell ThinOS 2408 and prior versions, which arises from improper privilege settings and can be exploited by a local, low-privilege attacker to cause an elevation of privilege...

7.8CVSS6.7AI score0.00131EPSS
SaveExploits0References1
Circl
Circl
added 2025/03/14 2:45 p.m.10 views

CVE-2024-2408

creationtimestamp| type| source ---|---|--- 2025-03-14 14:45:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7559...

5.9CVSS6AI score0.01158EPSS
SaveExploits1References1
OSV
OSV
added 2024/12/11 8:15 a.m.7 views

CVE-2024-53289

Dell ThinOS version 2408 contains a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

7CVSS5.8AI score0.00106EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/11 12:0 a.m.8 views

Dell ThinOS 安全漏洞

Dell ThinOS is a client operating system from Dell USA. A security vulnerability exists in Dell ThinOS version 2408, which stems from a Time of Check to Time of Use TOCTOU race condition that could allow a low-privileged attacker with local access privileges to exploit the vulnerability, resultin...

7.8CVSS6.3AI score0.00106EPSS
SaveExploits0References1
Rows per page
Query Builder